Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/3137302e3233392e36382e302f32322d3332203d3e203533313639.roa
File:                     3137302e3233392e36382e302f32322d3332203d3e203533313639.roa (raw, json)
Hash identifier:          H/a53JzQWTX4JYi3zsWEK7HwsxLjaUNHu6+e3lyMeIA=
Subject key identifier:   D8:78:F7:28:70:2D:46:3F:13:66:16:78:52:1E:1D:92:1A:60:B6:76
Certificate issuer:       /CN=14DABC9061A328905E8120751E9528DFE978C501
Certificate serial:       2468D046422204FBC8B666F8A84CB8253F1D4E30
Authority key identifier: 14:DA:BC:90:61:A3:28:90:5E:81:20:75:1E:95:28:DF:E9:78:C5:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DABC9061A328905E8120751E9528DFE978C501.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/3137302e3233392e36382e302f32322d3332203d3e203533313639.roa
Signing time:             Wed 04 Feb 2026 22:01:44 +0000
ROA not before:           Wed 04 Feb 2026 21:56:44 +0000
ROA not after:            Wed 03 Feb 2027 22:01:44 +0000
asID:                     53169
IP address blocks:        170.239.68.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/14DABC9061A328905E8120751E9528DFE978C501.crl
                          rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/14DABC9061A328905E8120751E9528DFE978C501.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DABC9061A328905E8120751E9528DFE978C501.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:10:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:68:d0:46:42:22:04:fb:c8:b6:66:f8:a8:4c:b8:25:3f:1d:4e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14DABC9061A328905E8120751E9528DFE978C501
        Validity
            Not Before: Feb  4 21:56:44 2026 GMT
            Not After : Feb  3 22:01:44 2027 GMT
        Subject: CN=D878F728702D463F13661678521E1D921A60B676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:43:4a:fd:59:40:8b:13:e7:30:16:ff:56:a2:
                    9f:06:5f:41:56:78:0d:69:21:be:8b:ef:32:15:5e:
                    5f:59:78:c5:8d:d0:d1:db:9f:b7:99:56:40:5b:ab:
                    4c:f8:29:d4:bc:82:3f:77:6e:0a:be:95:cd:1d:79:
                    ef:68:e5:2f:a7:21:fe:6e:a9:a1:4e:75:f6:68:c8:
                    9f:ab:d9:f4:71:37:b8:bd:07:ae:46:02:12:c4:e8:
                    ef:8c:17:57:2b:18:7f:67:0f:b1:1f:a9:db:01:b3:
                    e2:65:b4:ac:d7:19:96:d5:8b:d1:ef:7a:f8:ea:41:
                    a6:3c:dd:6e:0a:bb:50:9c:f9:cc:aa:c3:f1:48:7f:
                    09:ec:8a:00:2a:06:73:f4:0e:ef:a9:07:88:95:ac:
                    32:f3:2e:a3:ec:84:f4:49:12:72:ca:8d:71:b3:dd:
                    23:da:d0:fb:03:dd:e0:fc:44:a5:f7:3e:67:c1:2a:
                    ea:65:9a:7f:f1:f5:30:a8:39:bc:7e:25:55:26:96:
                    59:21:36:26:96:59:93:02:55:0c:01:34:43:da:ea:
                    b1:b2:90:82:e2:35:d9:5e:20:c1:82:32:f8:0d:a0:
                    ee:17:0f:31:a0:06:e5:2a:05:7a:58:d2:5d:aa:90:
                    91:d1:04:d6:2e:5e:af:70:67:fc:1f:00:3b:8c:db:
                    9e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:78:F7:28:70:2D:46:3F:13:66:16:78:52:1E:1D:92:1A:60:B6:76
            X509v3 Authority Key Identifier:
                keyid:14:DA:BC:90:61:A3:28:90:5E:81:20:75:1E:95:28:DF:E9:78:C5:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/14DABC9061A328905E8120751E9528DFE978C501.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DABC9061A328905E8120751E9528DFE978C501.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/3137302e3233392e36382e302f32322d3332203d3e203533313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:91:ab:ec:f0:0d:16:3f:57:14:98:c2:eb:8d:e8:91:df:90:
         0e:11:e7:26:94:9c:8d:59:93:27:b0:f3:b5:ca:1c:89:50:47:
         21:c6:8f:61:20:ee:13:e9:78:4b:3f:e8:a6:54:11:73:89:46:
         e1:3b:3a:ee:ec:52:6d:5c:b6:4f:07:97:8d:0a:9b:9c:02:45:
         7b:6f:6e:86:f9:8f:e9:77:e9:60:1f:2b:bc:c1:86:79:f1:62:
         3c:43:04:b5:3a:54:94:f4:04:ef:f3:79:7b:11:d2:5f:74:cf:
         e0:7a:83:49:f0:3a:9d:cb:80:bc:8e:16:08:7b:fd:b5:c6:72:
         94:bd:3e:57:61:50:a9:47:6b:1f:20:e9:d6:f6:df:72:70:03:
         00:d6:57:a9:0c:02:63:55:bf:d1:2c:9e:92:16:ba:c8:c0:b7:
         63:f9:f0:d7:9a:00:b5:0e:95:23:30:88:31:ea:1e:08:fa:86:
         e2:98:4b:14:3a:66:38:40:75:d7:e2:2b:35:e4:7d:0a:3b:ec:
         61:ef:a3:b4:81:ed:10:9b:20:b4:ba:29:49:5f:c4:a5:a5:5a:
         d4:aa:cc:73:33:40:87:61:ae:dd:3b:1d:f0:4b:59:f4:44:51:
         0a:72:af:24:17:10:8a:77:86:a5:e7:f1:ec:58:41:ad:da:52:
         0d:da:43:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:45:05 2026 by rpki-client